last executing test programs: 3m41.185503356s ago: executing program 1 (id=785): r0 = io_uring_setup(0x687b, &(0x7f0000001080)={0x0, 0x2e7, 0x800, 0x3, 0x1ca}) r1 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000000c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f000000bf00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="1b", 0x1}], 0x1}}], 0x1, 0x10081) close_range(r0, 0xffffffffffffffff, 0x0) 3m41.166210468s ago: executing program 1 (id=796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x38}], 0x1}, 0x0) 3m41.158463298s ago: executing program 1 (id=788): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0xab34, 0x10000, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8, 0x1}) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_io_uring_setup(0x1101, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x3900, 0x43, 0x0, 0x0) 3m41.041623725s ago: executing program 32 (id=792): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m40.969319279s ago: executing program 1 (id=805): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 3m40.920052142s ago: executing program 1 (id=797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_xfrm(0x10, 0x3, 0x6) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a0488a80180c20000035d76243d65328100520086dd69000400000006"], 0x3e) 3m40.592346701s ago: executing program 1 (id=808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3, r3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 3m40.592187721s ago: executing program 33 (id=808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3, r3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 2m48.858093314s ago: executing program 6 (id=1856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x7, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m48.781521278s ago: executing program 6 (id=1857): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r2, 0x4) 2m48.624593577s ago: executing program 6 (id=1863): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) 2m47.72426427s ago: executing program 6 (id=1883): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') io_setup(0x7, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 2m47.400396479s ago: executing program 6 (id=1886): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32], 0x50) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2m46.738737908s ago: executing program 6 (id=1901): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 2m46.716254569s ago: executing program 34 (id=1901): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 2m36.995067377s ago: executing program 5 (id=2162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000016bc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000014780)="f2", 0x1}], 0x1, &(0x7f0000000540)=ANY=[], 0x10}}], 0x1, 0x4044044) 2m36.962883199s ago: executing program 5 (id=2164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 2m36.892514843s ago: executing program 5 (id=2171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0x10, 0x6, @remote}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 2m36.751435331s ago: executing program 5 (id=2174): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 2m36.675998236s ago: executing program 5 (id=2175): pipe2$9p(&(0x7f00000000c0), 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 2m36.389826292s ago: executing program 5 (id=2178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) 2m36.389661572s ago: executing program 35 (id=2178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) 2m1.368281208s ago: executing program 0 (id=2980): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m0.31653663s ago: executing program 0 (id=2997): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES32], 0x15) 2m0.215839236s ago: executing program 0 (id=3001): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6c7e, &(0x7f0000000140)={0x0, 0x0, 0x800}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m0.126914501s ago: executing program 0 (id=3002): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@abort}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46942, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x751b, &(0x7f0000000400)={0x0, 0x7ee9, 0x1, 0x13, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m59.931538402s ago: executing program 0 (id=3005): socket(0x10, 0x803, 0x0) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r0], 0x0) 1m55.121929663s ago: executing program 0 (id=3046): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) close_range(r0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) 1m55.080599726s ago: executing program 36 (id=3046): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) close_range(r0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) 1m14.756610792s ago: executing program 7 (id=3845): r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x45, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m14.724410684s ago: executing program 7 (id=3846): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) 1m14.685432216s ago: executing program 7 (id=3847): mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8024}, 0x20000010) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}]}}]}, 0x60}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m14.558546034s ago: executing program 7 (id=3848): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m14.324853098s ago: executing program 7 (id=3859): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xda) 1m14.312794348s ago: executing program 7 (id=3851): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m14.27496719s ago: executing program 37 (id=3851): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2.775960968s ago: executing program 3 (id=5404): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r1, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setpgid(0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x2) 2.73572642s ago: executing program 3 (id=5405): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.546331541s ago: executing program 3 (id=5407): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200080}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.229016339s ago: executing program 3 (id=5413): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1fd, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x9, 0x3, 0x1c0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0xffffffff, 'vxcan1\x00', 'syzkaller0\x00', {}, {0xff}, 0x25, 0x2, 0xc}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x4, 0x1}, {0x2, 0x0, 0x3}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.124338655s ago: executing program 3 (id=5414): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0xfffffffffffffffd, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x2, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4040, &(0x7f0000000080), 0xfe, 0x494, &(0x7f0000001dc0)="$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") r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff08) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4) 2.079384298s ago: executing program 3 (id=5416): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 712.337558ms ago: executing program 4 (id=5428): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x10}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) 703.674629ms ago: executing program 4 (id=5429): unshare(0x22020400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r1, r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) 663.258251ms ago: executing program 2 (id=5431): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x8, 0x1, 0x15}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) 638.651913ms ago: executing program 9 (id=5433): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) recvfrom(r1, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) 520.327119ms ago: executing program 4 (id=5435): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2}}, 0x2e) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 507.67086ms ago: executing program 9 (id=5437): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x6b]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 459.582253ms ago: executing program 2 (id=5438): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b140, 0x0, 0x6, 0x3a2}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, 0x0, 0x0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r0, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) 448.236783ms ago: executing program 9 (id=5439): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) shutdown(r0, 0x0) 443.067444ms ago: executing program 8 (id=5440): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x8000) 365.543168ms ago: executing program 2 (id=5441): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r3, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000000)="6f3d12caa1", 0x5, 0x4, &(0x7f0000000180)={0x11, 0x8100, r3, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 284.096214ms ago: executing program 9 (id=5442): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_RATE={0x14, 0x6, {0xf4d, 0x1c13, 0x6, 0x80000f}}]}}}]}, 0x60}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) close(0x3) 279.901084ms ago: executing program 4 (id=5443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 250.846415ms ago: executing program 8 (id=5444): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 222.003407ms ago: executing program 2 (id=5445): r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1) r1 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ee, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711224000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200001c, &(0x7f0000000080)=ANY=[], 0x1, 0x294, &(0x7f00000008c0)="$eJzs3U9LFGEcB/DHVTEMxVNQlx7q1GVQzx2UUJAWinKDCoIRx1p22pWdPexKBzt3CTr2DqJjtyB6A76Lbl7EkxBk1PgnhU6iK+znc5kv850Hnh8Dzxxn++771421IllLO6EyNxQqcyFU9obCVKiEQ5vhzoe3H989fvrs/ny1uvAoxsX55ZnZGOPkzW/P33y+9b1z9cmXya9jYWvqxfbO7I+ta1vXt38tv6oXsV7EZqsT07jSanXSlTyLq/WikcT4MM/SIov1ZpG1T/RreWt9vRfT5urE+Ho7K4qYNnuxkfVipxU77V5MX6b1ZkySJE6MB86i9mlvfz/s7Jf6vRsunvc/2P451K+EsLvZrXVr5bXsF5eqC9Pxr9HjVbvdbm34qJ8p+3iyHw3jB/3s6f7w03K77P909x5UT60fC6vnPDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDK4lHpo7v7na7teGyT/7Xl2lxqbowffDAyX4k3Bi5sDEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EyK3kYjzfOsLQgDGH6OhXAJtnEJQ79PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh4xz/97vdOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Keit9FI8zxrn2Po94wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFa/AwAA//8icWwj") 218.856207ms ago: executing program 8 (id=5446): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x38, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x4880) 204.535557ms ago: executing program 4 (id=5447): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESOCT=r1], 0x15) 196.501658ms ago: executing program 9 (id=5448): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701fe"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 152.540311ms ago: executing program 8 (id=5449): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x31) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0xec5ae005342a7336, {0x42, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 136.364202ms ago: executing program 2 (id=5450): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@delpolicy={0x64, 0x14, 0x211, 0x0, 0x0, {{@in=@broadcast, @in6=@private2}, 0x6e6bc0}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}]}, 0x64}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000680)=0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 107.740364ms ago: executing program 9 (id=5451): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 87.492325ms ago: executing program 8 (id=5452): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xffffff02, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0xffc, &(0x7f0000002500)=""/4092, 0x0, 0x64}, 0x94) 12.774299ms ago: executing program 2 (id=5453): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200000000140, 0x0, 0x0, 0x20000000016b, 0x2000000001a0, 0xfffffffffffffffd], 0x0, 0x0, 0x0}, 0x138) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 764.88µs ago: executing program 8 (id=5454): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x3) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r2, r3, 0x1, 0x0) 0s ago: executing program 4 (id=5455): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000000)="5cdd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): AT-fs (loop2): Directory bread(block 66) failed [ 219.168335][T14931] team0: Port device dummy0 added [ 219.195368][T14925] FAT-fs (loop2): Directory bread(block 67) failed [ 219.206071][T14925] FAT-fs (loop2): Directory bread(block 68) failed [ 219.214800][T14931] netlink: 'syz.4.3952': attribute type 10 has an invalid length. [ 219.222853][T14925] FAT-fs (loop2): Directory bread(block 69) failed [ 219.228764][T14931] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 219.240018][T14931] team0: Failed to send options change via netlink (err -105) [ 219.246515][T14925] FAT-fs (loop2): Directory bread(block 70) failed [ 219.255167][T14931] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 219.264771][T14931] team0: Port device dummy0 removed [ 219.265135][T14925] FAT-fs (loop2): Directory bread(block 71) failed [ 219.276947][T14931] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 219.286499][T14925] FAT-fs (loop2): Directory bread(block 72) failed [ 219.302528][T14925] FAT-fs (loop2): Directory bread(block 73) failed [ 219.366634][T14925] bio_check_eod: 84 callbacks suppressed [ 219.366653][T14925] syz.2.3948: attempt to access beyond end of device [ 219.366653][T14925] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 219.477367][ T29] audit: type=1400 audit(2000000604.876:1436): avc: denied { mount } for pid=14947 comm="syz.2.3960" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 219.501003][ T29] audit: type=1400 audit(2000000604.876:1437): avc: denied { search } for pid=14947 comm="syz.2.3960" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 219.523656][ T29] audit: type=1400 audit(2000000604.876:1438): avc: denied { search } for pid=14947 comm="syz.2.3960" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 219.546618][ T29] audit: type=1400 audit(2000000604.876:1439): avc: denied { read open } for pid=14947 comm="syz.2.3960" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 219.617423][T14955] lo speed is unknown, defaulting to 1000 [ 219.662757][T14959] netlink: 'syz.9.3974': attribute type 10 has an invalid length. [ 219.692887][T14959] team0: Failed to send options change via netlink (err -105) [ 219.700834][T14959] team0: Port device dummy0 added [ 219.733832][T14959] netlink: 'syz.9.3974': attribute type 10 has an invalid length. [ 219.744986][T14959] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 219.759990][T14959] team0: Failed to send options change via netlink (err -105) [ 219.768535][T14959] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 219.786858][T14959] team0: Port device dummy0 removed [ 219.804566][T14959] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 219.913240][T14973] SET target dimension over the limit! [ 219.915228][T14975] loop9: detected capacity change from 0 to 512 [ 219.927550][T14975] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 219.937571][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 220.017689][T14975] EXT4-fs (loop9): 1 truncate cleaned up [ 220.029832][T14975] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.092080][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.878091][T15029] lo speed is unknown, defaulting to 1000 [ 220.956910][T15040] loop9: detected capacity change from 0 to 128 [ 220.973115][T15041] Cannot find add_set index 0 as target [ 220.986483][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 221.114570][T15054] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4004'. [ 221.206343][T15059] loop9: detected capacity change from 0 to 1024 [ 221.238881][T15059] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 221.271800][T15059] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.313740][ T29] audit: type=1400 audit(2000000606.716:1440): avc: denied { execute } for pid=15058 comm="syz.9.4015" path="/184/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.373909][T15069] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.4015: Freeing blocks not in datazone - block = 0, count = 16 [ 221.396988][T15065] lo speed is unknown, defaulting to 1000 [ 221.583911][T11467] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:61: bg 0: block 112: padding at end of block bitmap is not set [ 221.604341][T11467] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 221.617514][T11467] EXT4-fs (loop9): This should not happen!! Data will be lost [ 221.617514][T11467] [ 221.627383][T11467] EXT4-fs (loop9): Total free blocks count 0 [ 221.633433][T11467] EXT4-fs (loop9): Free/Dirty block details [ 221.639441][T11467] EXT4-fs (loop9): free_blocks=16 [ 221.644756][T11467] EXT4-fs (loop9): dirty_blocks=16 [ 221.650603][T11467] EXT4-fs (loop9): Block reservation details [ 221.656664][T11467] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 221.722334][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 221.738830][T15094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4018'. [ 221.874190][T15112] loop8: detected capacity change from 0 to 1024 [ 221.917985][T15112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 221.941493][T15112] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.986343][T15123] lo speed is unknown, defaulting to 1000 [ 222.017111][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 222.045978][T15112] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.4025: Freeing blocks not in datazone - block = 0, count = 16 [ 222.094122][T11449] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:47: bg 0: block 112: padding at end of block bitmap is not set [ 222.109581][T11449] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 222.122656][T11449] EXT4-fs (loop8): This should not happen!! Data will be lost [ 222.122656][T11449] [ 222.132545][T11449] EXT4-fs (loop8): Total free blocks count 0 [ 222.138726][T11449] EXT4-fs (loop8): Free/Dirty block details [ 222.144755][T11449] EXT4-fs (loop8): free_blocks=16 [ 222.150553][T11449] EXT4-fs (loop8): dirty_blocks=16 [ 222.155784][T11449] EXT4-fs (loop8): Block reservation details [ 222.162016][T11449] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 222.210464][T13358] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 222.222990][T15142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4035'. [ 223.056508][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.332405][ T29] audit: type=1326 audit(2000000608.736:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 223.364594][T15256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4090'. [ 223.381367][ T29] audit: type=1326 audit(2000000608.736:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 223.405743][ T29] audit: type=1326 audit(2000000608.736:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 223.430486][ T29] audit: type=1326 audit(2000000608.766:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 223.454527][ T29] audit: type=1326 audit(2000000608.766:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 223.479096][ T29] audit: type=1326 audit(2000000608.766:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 223.503893][ T29] audit: type=1326 audit(2000000608.766:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 223.528450][ T29] audit: type=1326 audit(2000000608.766:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 223.552345][ T29] audit: type=1326 audit(2000000608.766:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 223.576079][ T29] audit: type=1326 audit(2000000608.766:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 223.609218][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4090'. [ 223.706122][T15271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4095'. [ 223.717742][T15271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4095'. [ 224.106482][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 224.308026][T15305] netlink: 'syz.9.4107': attribute type 10 has an invalid length. [ 224.347348][T15305] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 224.460507][T15311] loop2: detected capacity change from 0 to 1024 [ 224.470425][T15311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.508956][T15311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.734426][T14476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.136526][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 225.457550][T15346] netlink: 'syz.9.4130': attribute type 1 has an invalid length. [ 225.484985][T15346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.560584][T15346] bond1: (slave veth5): Enslaving as an active interface with a down link [ 225.571575][T15357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4122'. [ 225.585437][T15356] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 225.594863][T15356] bond1: (slave batadv1): making interface the new active one [ 225.604678][T15356] batadv1: entered promiscuous mode [ 225.641821][T15361] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4125'. [ 225.658391][T15356] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 225.674640][T15361] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4125'. [ 225.817644][T15375] loop9: detected capacity change from 0 to 256 [ 225.958800][T15387] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4146'. [ 226.186514][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 226.212905][T15401] netlink: 'syz.3.4140': attribute type 1 has an invalid length. [ 226.227560][T15401] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.252721][T15401] bond5: (slave veth27): Enslaving as an active interface with a down link [ 226.275051][T15401] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.285139][T15401] bond5: (slave batadv1): making interface the new active one [ 226.294529][T15401] batadv1: entered promiscuous mode [ 226.300489][T15401] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 226.883308][T15422] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4149'. [ 226.979489][T15427] loop9: detected capacity change from 0 to 1024 [ 226.988123][T15427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.047522][T15427] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.216508][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 227.262774][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.485990][T15461] sctp: [Deprecated]: syz.8.4162 (pid 15461) Use of int in max_burst socket option. [ 227.485990][T15461] Use struct sctp_assoc_value instead [ 227.657391][T15474] netlink: 'syz.4.4167': attribute type 1 has an invalid length. [ 227.680940][T15474] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 227.691942][T15474] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 227.703258][T15474] bond5: (slave ip6gre2): making interface the new active one [ 227.711490][T15474] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 227.726627][T15474] bond5: option fail_over_mac: unable to set because the bond device has slaves [ 227.941704][T15490] sctp: [Deprecated]: syz.4.4174 (pid 15490) Use of int in max_burst socket option. [ 227.941704][T15490] Use struct sctp_assoc_value instead [ 228.100893][T15498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4178'. [ 228.138770][T15500] netlink: 'syz.4.4179': attribute type 10 has an invalid length. [ 228.146868][T15500] veth1_vlan: left promiscuous mode [ 228.153119][T15500] batman_adv: batadv0: Adding interface: veth1_vlan [ 228.159969][T15500] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.187014][T15500] batman_adv: batadv0: Interface activated: veth1_vlan [ 228.266766][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.556733][T15521] netlink: 'syz.8.4188': attribute type 1 has an invalid length. [ 228.607389][T15521] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 228.618106][T15521] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 228.630222][T15521] bond2: (slave ip6gre1): making interface the new active one [ 228.638691][T15521] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 228.654204][T15521] bond2: option fail_over_mac: unable to set because the bond device has slaves [ 228.890669][T15531] netlink: 'syz.2.4191': attribute type 10 has an invalid length. [ 228.899405][T15531] __nla_validate_parse: 2 callbacks suppressed [ 228.899421][T15531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4191'. [ 228.919602][T15531] batman_adv: batadv0: Adding interface: veth1_vlan [ 228.926970][T15531] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.969591][T15531] batman_adv: batadv0: Interface activated: veth1_vlan [ 229.003902][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4195'. [ 229.142859][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 229.142876][ T29] audit: type=1326 audit(2000000614.546:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 229.197124][ T29] audit: type=1326 audit(2000000614.576:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 229.221574][ T29] audit: type=1326 audit(2000000614.576:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 229.246281][ T29] audit: type=1326 audit(2000000614.576:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 229.270769][ T29] audit: type=1326 audit(2000000614.596:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 229.294602][ T29] audit: type=1326 audit(2000000614.596:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 229.318990][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 229.326797][ T29] audit: type=1326 audit(2000000614.596:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 229.351812][ T29] audit: type=1326 audit(2000000614.596:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 229.376032][ T29] audit: type=1326 audit(2000000614.596:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 229.400671][ T29] audit: type=1326 audit(2000000614.596:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 229.872671][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4212'. [ 229.910172][T15584] netlink: 'syz.8.4213': attribute type 10 has an invalid length. [ 229.918578][T15584] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4213'. [ 229.930358][T15584] batman_adv: batadv0: Adding interface: veth1_vlan [ 229.937476][T15584] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.975347][T15584] batman_adv: batadv0: Interface activated: veth1_vlan [ 230.336479][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 230.507810][T15618] netlink: 'syz.3.4230': attribute type 10 has an invalid length. [ 230.515791][T15618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4230'. [ 230.525339][T15618] veth1_vlan: left promiscuous mode [ 230.532237][T15618] batman_adv: batadv0: Adding interface: veth1_vlan [ 230.541101][T15618] batman_adv: batadv0: Interface activated: veth1_vlan [ 231.376509][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 231.891593][T15663] loop9: detected capacity change from 0 to 1024 [ 231.959460][T15663] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.988741][T15663] EXT4-fs (loop9): shut down requested (0) [ 232.056520][ T36] IPVS: starting estimator thread 0... [ 232.147347][T15670] IPVS: using max 2592 ests per chain, 129600 per kthread [ 232.154884][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.311350][T15686] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 232.317914][T15686] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 232.325510][T15686] vhci_hcd vhci_hcd.0: Device attached [ 232.365086][T15691] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 232.371755][T15691] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.380038][T15691] vhci_hcd vhci_hcd.0: Device attached [ 232.416492][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 232.429836][T15686] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(5) [ 232.436540][T15686] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 232.444382][T15686] vhci_hcd vhci_hcd.0: Device attached [ 232.467755][T15686] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 232.474377][T15686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.482220][T15686] vhci_hcd vhci_hcd.0: Device attached [ 232.502986][T15686] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(11) [ 232.509917][T15686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.517734][T15686] vhci_hcd vhci_hcd.0: Device attached [ 232.523622][ T9] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 232.563575][T15691] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 232.586582][ T9] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 232.603399][T15686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 232.638354][T15686] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(17) [ 232.645189][T15686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.652939][T15686] vhci_hcd vhci_hcd.0: Device attached [ 232.688356][T15704] vhci_hcd: connection closed [ 232.688704][T15698] vhci_hcd: connection closed [ 232.693564][T15696] vhci_hcd: connection closed [ 232.698439][T15694] vhci_hcd: connection closed [ 232.703393][T15692] vhci_hcd: connection closed [ 232.708408][T11465] vhci_hcd vhci_hcd.8: stop threads [ 232.708511][T15687] vhci_hcd: connection reset by peer [ 232.713298][T11465] vhci_hcd vhci_hcd.8: release socket [ 232.713324][T11465] vhci_hcd vhci_hcd.8: disconnect device [ 232.739105][T11465] vhci_hcd vhci_hcd.8: stop threads [ 232.744495][T11465] vhci_hcd vhci_hcd.8: release socket [ 232.750441][T11465] vhci_hcd vhci_hcd.8: disconnect device [ 232.771301][T11465] vhci_hcd vhci_hcd.8: stop threads [ 232.776601][T11465] vhci_hcd vhci_hcd.8: release socket [ 232.782121][T11465] vhci_hcd vhci_hcd.8: disconnect device [ 232.794205][T11465] vhci_hcd vhci_hcd.8: stop threads [ 232.799608][T11465] vhci_hcd vhci_hcd.8: release socket [ 232.805020][T11465] vhci_hcd vhci_hcd.8: disconnect device [ 232.822424][T11465] vhci_hcd vhci_hcd.8: stop threads [ 232.827900][T11465] vhci_hcd vhci_hcd.8: release socket [ 232.833577][T11465] vhci_hcd vhci_hcd.8: disconnect device [ 232.839815][T11465] vhci_hcd vhci_hcd.8: stop threads [ 232.845146][T11465] vhci_hcd vhci_hcd.8: release socket [ 232.850947][T11465] vhci_hcd vhci_hcd.8: disconnect device [ 233.013686][T15721] lo speed is unknown, defaulting to 1000 [ 233.143076][T15721] netlink: 'syz.3.4262': attribute type 13 has an invalid length. [ 233.155481][T15721] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 233.175919][T15721] netlink: 'syz.3.4262': attribute type 4 has an invalid length. [ 233.456492][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 233.483111][T15728] loop8: detected capacity change from 0 to 1024 [ 233.525999][T15728] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.543895][T15728] EXT4-fs (loop8): shut down requested (0) [ 233.711611][T15745] syzkaller0: entered allmulticast mode [ 233.719884][T13358] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.729968][T15745] syzkaller0: entered promiscuous mode [ 233.737795][T15745] syzkaller0 (unregistering): left allmulticast mode [ 233.744845][T15745] syzkaller0 (unregistering): left promiscuous mode [ 234.299022][T15763] loop2: detected capacity change from 0 to 256 [ 234.324405][T15763] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.496504][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 234.513956][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 234.513984][ T29] audit: type=1400 audit(2000000619.916:1609): avc: denied { view } for pid=15772 comm="syz.2.4284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 234.604587][T15779] VFS: Mount too revealing [ 234.609249][ T29] audit: type=1400 audit(2000000620.006:1610): avc: denied { mount } for pid=15776 comm="syz.2.4287" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 234.760023][ T29] audit: type=1400 audit(2000000620.166:1611): avc: denied { name_bind } for pid=15785 comm="syz.8.4290" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 234.787022][T15783] syzkaller0: entered allmulticast mode [ 234.793168][T15783] syzkaller0: entered promiscuous mode [ 234.810475][T15783] syzkaller0 (unregistering): left allmulticast mode [ 234.817603][T15783] syzkaller0 (unregistering): left promiscuous mode [ 234.839171][T15789] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 234.845899][T15789] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 234.853645][T15789] vhci_hcd vhci_hcd.0: Device attached [ 234.893790][T15794] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 234.900414][T15794] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.908129][T15794] vhci_hcd vhci_hcd.0: Device attached [ 234.953693][T15801] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 234.960334][T15801] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 234.968179][T15801] vhci_hcd vhci_hcd.0: Device attached [ 234.985928][T15805] loop8: detected capacity change from 0 to 512 [ 234.993103][T15805] EXT4-fs: Ignoring removed nobh option [ 235.013023][T15789] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 235.019678][T15789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.027505][T15789] vhci_hcd vhci_hcd.0: Device attached [ 235.046554][ T1040] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 235.053746][T15789] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(8) [ 235.060561][T15789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.069540][T15789] vhci_hcd vhci_hcd.0: Device attached [ 235.077796][T15789] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.090976][T15805] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.110037][ T1040] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 235.127519][T15789] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.145865][T15805] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.168239][T15789] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 235.175058][T15789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.182781][T15789] vhci_hcd vhci_hcd.0: Device attached [ 235.243009][ T29] audit: type=1400 audit(2000000620.606:1612): avc: denied { setattr } for pid=15804 comm="syz.8.4295" path="/148/bus/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 235.274007][T15815] vhci_hcd: connection closed [ 235.274310][T11467] vhci_hcd vhci_hcd.2: stop threads [ 235.285347][T11467] vhci_hcd vhci_hcd.2: release socket [ 235.290990][T11467] vhci_hcd vhci_hcd.2: disconnect device [ 235.305056][T15808] vhci_hcd: connection closed [ 235.305343][T15811] vhci_hcd: connection closed [ 235.306939][T15797] vhci_hcd: connection closed [ 235.311081][T15802] vhci_hcd: connection closed [ 235.320332][T15790] vhci_hcd: connection reset by peer [ 235.348317][T15817] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.4295: corrupted inode contents [ 235.367318][T15817] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #18: comm syz.8.4295: mark_inode_dirty error [ 235.380772][T11467] vhci_hcd vhci_hcd.2: stop threads [ 235.386074][T11467] vhci_hcd vhci_hcd.2: release socket [ 235.391548][T11467] vhci_hcd vhci_hcd.2: disconnect device [ 235.399194][T15817] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.4295: corrupted inode contents [ 235.411637][T15817] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #18: comm syz.8.4295: mark_inode_dirty error [ 235.423951][T15817] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #18: comm syz.8.4295: mark inode dirty (error -117) [ 235.437796][T11467] vhci_hcd vhci_hcd.2: stop threads [ 235.443460][T11467] vhci_hcd vhci_hcd.2: release socket [ 235.446697][T15817] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 235.448985][T11467] vhci_hcd vhci_hcd.2: disconnect device [ 235.471913][T11467] vhci_hcd vhci_hcd.2: stop threads [ 235.477545][T11467] vhci_hcd vhci_hcd.2: release socket [ 235.483277][T11467] vhci_hcd vhci_hcd.2: disconnect device [ 235.490220][T11467] vhci_hcd vhci_hcd.2: stop threads [ 235.495766][T11467] vhci_hcd vhci_hcd.2: release socket [ 235.501861][T11467] vhci_hcd vhci_hcd.2: disconnect device [ 235.510377][T11467] vhci_hcd vhci_hcd.2: stop threads [ 235.515827][T11467] vhci_hcd vhci_hcd.2: release socket [ 235.521499][T11467] vhci_hcd vhci_hcd.2: disconnect device [ 235.536536][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 235.539018][T13358] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.628863][T15824] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.4299'. [ 235.638230][T15824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4299'. [ 235.649007][T15826] loop8: detected capacity change from 0 to 128 [ 235.777504][T15827] syz.8.4300: attempt to access beyond end of device [ 235.777504][T15827] loop8: rw=2049, sector=553, nr_sectors = 8 limit=128 [ 235.777769][T15826] syz.8.4300: attempt to access beyond end of device [ 235.777769][T15826] loop8: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 235.813250][T15827] syz.8.4300: attempt to access beyond end of device [ 235.813250][T15827] loop8: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 235.826242][T15826] syz.8.4300: attempt to access beyond end of device [ 235.826242][T15826] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 235.841576][T15826] syz.8.4300: attempt to access beyond end of device [ 235.841576][T15826] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 235.855531][T15826] syz.8.4300: attempt to access beyond end of device [ 235.855531][T15826] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 235.881057][T15826] syz.8.4300: attempt to access beyond end of device [ 235.881057][T15826] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 235.895277][T15826] syz.8.4300: attempt to access beyond end of device [ 235.895277][T15826] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 235.911911][T15827] syz.8.4300: attempt to access beyond end of device [ 235.911911][T15827] loop8: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 235.930342][T15826] syz.8.4300: attempt to access beyond end of device [ 235.930342][T15826] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 236.107713][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4306'. [ 236.152562][T15845] loop2: detected capacity change from 0 to 2048 [ 236.172446][T15845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.249338][T14476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.318804][T15852] loop2: detected capacity change from 0 to 512 [ 236.330177][T15852] EXT4-fs: Ignoring removed nobh option [ 236.350317][T15852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.371803][T15852] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.454027][T15852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.4309: corrupted inode contents [ 236.512990][T15852] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #18: comm syz.2.4309: mark_inode_dirty error [ 236.538600][T15852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.4309: corrupted inode contents [ 236.565474][T15852] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #18: comm syz.2.4309: mark_inode_dirty error [ 236.578632][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 236.601130][T15852] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #18: comm syz.2.4309: mark inode dirty (error -117) [ 236.616338][T15852] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 236.657136][T14476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.046727][T11443] batadv1: left promiscuous mode [ 237.167880][T15882] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.4321'. [ 237.177424][T15882] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4321'. [ 237.587129][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4332'. [ 237.606688][T11417] batadv1: left promiscuous mode [ 237.616519][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 237.616678][ T9] usb 17-1: enqueue for inactive port 0 [ 237.637656][ T9] usb 17-1: enqueue for inactive port 0 [ 237.718463][ T9] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 237.948702][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4339'. [ 237.988891][T15900] team1: entered promiscuous mode [ 237.994207][T15900] team1: entered allmulticast mode [ 238.021474][T15900] 8021q: adding VLAN 0 to HW filter on device team1 [ 238.110108][T15914] netlink: 'syz.4.4333': attribute type 1 has an invalid length. [ 238.148106][T15914] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.231218][T15914] bond6: (slave veth27): Enslaving as an active interface with a down link [ 238.342736][T15914] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 238.370493][T15914] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 238.483398][T15923] lo speed is unknown, defaulting to 1000 [ 238.656569][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 238.828838][T15923] netlink: 'syz.2.4336': attribute type 13 has an invalid length. [ 238.839948][T15943] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.4342'. [ 238.842328][T15923] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 238.849645][T15943] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4342'. [ 238.883158][T15923] netlink: 'syz.2.4336': attribute type 4 has an invalid length. [ 239.071807][T15957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4359'. [ 239.245142][T15971] loop2: detected capacity change from 0 to 128 [ 239.382300][T15982] team1: entered promiscuous mode [ 239.387742][T15982] team1: entered allmulticast mode [ 239.393490][T15982] 8021q: adding VLAN 0 to HW filter on device team1 [ 239.501644][T15995] netlink: 'syz.2.4372': attribute type 1 has an invalid length. [ 239.518971][T15995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.542847][T15995] bond1: (slave veth3): Enslaving as an active interface with a down link [ 239.562616][T15995] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 239.570309][T15995] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 239.696526][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 239.861189][T16021] loop9: detected capacity change from 0 to 128 [ 239.927853][ T29] audit: type=1326 audit(2000000625.336:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 239.927891][ T29] audit: type=1326 audit(2000000625.336:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 239.930281][ T29] audit: type=1326 audit(2000000625.336:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 239.930389][ T29] audit: type=1326 audit(2000000625.336:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 239.930414][ T29] audit: type=1326 audit(2000000625.336:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 239.930438][ T29] audit: type=1326 audit(2000000625.336:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 239.930506][ T29] audit: type=1326 audit(2000000625.336:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 240.099869][ T29] audit: type=1326 audit(2000000625.336:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 240.099905][ T29] audit: type=1326 audit(2000000625.336:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 240.148811][ T29] audit: type=1326 audit(2000000625.336:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7ffc0000 [ 240.176542][ T1040] usb 5-1: enqueue for inactive port 0 [ 240.176651][ T1040] usb 5-1: enqueue for inactive port 0 [ 240.232899][T16033] netlink: 'syz.3.4375': attribute type 10 has an invalid length. [ 240.246692][ T1040] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 240.736538][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 241.189982][T16072] netlink: 'syz.4.4388': attribute type 10 has an invalid length. [ 241.200425][T16072] bond0: (slave dummy0): Releasing backup interface [ 241.213211][T16072] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 241.223310][T16072] team0: Failed to send options change via netlink (err -105) [ 241.230937][T16072] team0: Port device dummy0 added [ 241.776554][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 242.125745][T16084] __nla_validate_parse: 6 callbacks suppressed [ 242.125767][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4393'. [ 242.177951][T16095] lo: Caught tx_queue_len zero misconfig [ 242.816514][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 243.174517][T16126] netlink: 'syz.8.4409': attribute type 10 has an invalid length. [ 243.189333][T16126] team0: Failed to send options change via netlink (err -105) [ 243.197100][T16126] team0: Port device dummy0 added [ 243.241587][T16130] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4410'. [ 243.386011][T16152] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4420'. [ 243.856509][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 244.015704][T16187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4434'. [ 244.499585][T16240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4447'. [ 244.896865][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 244.999832][T16310] 9p: Bad value for 'wfdno' [ 245.252988][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 245.253063][ T29] audit: type=1326 audit(2000000630.656:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 245.253235][ T29] audit: type=1326 audit(2000000630.656:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 245.266660][ T29] audit: type=1326 audit(2000000630.666:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 245.344783][ T29] audit: type=1326 audit(2000000630.746:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 245.396593][ T29] audit: type=1326 audit(2000000630.776:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 245.396648][ T29] audit: type=1326 audit(2000000630.796:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 245.396678][ T29] audit: type=1326 audit(2000000630.796:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 245.396773][ T29] audit: type=1326 audit(2000000630.796:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 245.396841][ T29] audit: type=1326 audit(2000000630.796:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 245.396905][ T29] audit: type=1326 audit(2000000630.796:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 245.936501][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 246.178591][T16378] loop8: detected capacity change from 0 to 1024 [ 246.187070][T16378] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 246.202066][T16378] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 246.211867][T16378] EXT4-fs (loop8): orphan cleanup on readonly fs [ 246.221915][T16378] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4469: Failed to acquire dquot type 0 [ 246.235038][T16378] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4469: Failed to acquire dquot type 0 [ 246.247420][T16378] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.4469: Freeing blocks not in datazone - block = 0, count = 4096 [ 246.262756][T16378] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4469: Failed to acquire dquot type 0 [ 246.275206][T16378] EXT4-fs (loop8): 1 orphan inode deleted [ 246.282343][T16378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.308004][T13358] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.976486][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 247.326617][T16453] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4498'. [ 247.420784][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4506'. [ 247.591086][T16478] loop9: detected capacity change from 0 to 8192 [ 247.666114][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4516'. [ 247.697256][T16489] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4516'. [ 247.699814][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4515'. [ 247.765071][T16496] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4518'. [ 247.803346][T16496] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4518'. [ 247.998593][T16516] loop2: detected capacity change from 0 to 8192 [ 248.007482][T16519] loop8: detected capacity change from 0 to 128 [ 248.016513][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 248.127508][T16524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4530'. [ 248.166092][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4531'. [ 248.176949][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4531'. [ 248.206989][T16533] loop2: detected capacity change from 0 to 7 [ 248.222964][T14476] loop2: [ 248.237988][T16533] loop2: [ 248.241414][ T3009] loop2: [ 248.665446][T16589] loop2: detected capacity change from 0 to 128 [ 249.066550][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.152179][T16651] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 249.313673][T16689] loop8: detected capacity change from 0 to 512 [ 249.327872][T16651] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 249.337822][T16689] EXT4-fs: Ignoring removed bh option [ 249.356742][T16689] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 249.378330][T16651] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 249.400419][T16689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.416768][T16689] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.442783][T16651] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 249.451685][T16706] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.462813][T13358] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.490296][T16706] syz_tun (unregistering): left allmulticast mode [ 249.497300][T16706] syz_tun (unregistering): left promiscuous mode [ 249.503761][T16706] bridge0: port 3(syz_tun) entered disabled state [ 249.560925][T11425] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 249.576561][ T71] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 249.600626][ T71] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 249.616353][ T71] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 249.720879][T16729] loop2: detected capacity change from 0 to 512 [ 249.728667][T16729] EXT4-fs: Ignoring removed bh option [ 249.743427][T16729] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 249.774193][T16729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.810242][T16729] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.860676][T14476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.096511][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 250.359347][T16794] SELinux: Context system_u: is not valid (left unmapped). [ 250.359373][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 250.359388][ T29] audit: type=1400 audit(2000000635.766:1650): avc: denied { relabelfrom } for pid=16791 comm="syz.8.4604" name="SCTPv6" dev="sockfs" ino=56504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 250.400150][ T29] audit: type=1400 audit(2000000635.776:1651): avc: denied { relabelto } for pid=16791 comm="syz.8.4604" name="SCTPv6" dev="sockfs" ino=56504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:" [ 250.623735][ T29] audit: type=1326 audit(2000000636.026:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16797 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf86e1acb9 code=0x7fc00000 [ 250.755749][ T29] audit: type=1326 audit(2000000636.156:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.2.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7696a6acb9 code=0x7fc00000 [ 250.927289][T16834] batadv_slave_0: entered promiscuous mode [ 251.114749][T16824] batadv_slave_0: left promiscuous mode [ 251.146526][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 251.356312][ T29] audit: type=1326 audit(2000000636.756:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16797 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf86e14ad7 code=0x7fc00000 [ 251.804076][T16891] loop9: detected capacity change from 0 to 512 [ 251.818470][T16891] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.832189][T16891] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.858687][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.868312][T16895] loop8: detected capacity change from 0 to 2048 [ 251.876119][T16895] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.906584][T16895] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.935113][T13358] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.980461][ T29] audit: type=1326 audit(2000000637.386:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7fc00000 [ 252.061051][ T29] audit: type=1400 audit(2000000637.426:1656): avc: denied { write } for pid=16904 comm="syz.8.4651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 252.150529][T16915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.157800][T16915] IPv6: NLM_F_CREATE should be set when creating new route [ 252.167404][T16917] tipc: Started in network mode [ 252.172516][T16917] tipc: Node identity 1e, cluster identity 64 [ 252.178859][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 252.186272][T16917] tipc: Node number set to 30 [ 252.231849][T16921] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.269474][T16924] batadv_slave_0: entered promiscuous mode [ 252.328652][T16921] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.421723][T16921] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.449372][T16937] __nla_validate_parse: 21 callbacks suppressed [ 252.449392][T16937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4664'. [ 252.521250][T16921] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.562715][ T71] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.575999][ T71] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.595958][ T71] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.620908][T11451] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.695372][T16958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4660'. [ 252.701828][T16920] batadv_slave_0: left promiscuous mode [ 252.705574][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4660'. [ 252.760373][T16958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4660'. [ 252.769599][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4660'. [ 252.783923][T16965] loop9: detected capacity change from 0 to 512 [ 252.800076][T16965] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 252.810184][T16965] EXT4-fs (loop9): orphan cleanup on readonly fs [ 252.817525][T16965] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 252.833030][T16965] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 252.840570][T16965] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #13: comm syz.9.4663: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 252.859286][T16965] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4663: couldn't read orphan inode 13 (err -117) [ 252.871839][ T29] audit: type=1400 audit(2000000638.266:1657): avc: denied { ioctl } for pid=16966 comm="syz.3.4667" path="socket:[56853]" dev="sockfs" ino=56853 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.872219][T16965] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.928950][T16965] EXT4-fs error (device loop9): ext4_lookup:1789: inode #2: comm syz.9.4663: deleted inode referenced: 12 [ 252.956180][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.990418][ T29] audit: type=1400 audit(2000000638.396:1658): avc: denied { name_bind 0x1000000 } for pid=16977 comm="syz.9.4671" path="socket:[55979]" dev="sockfs" ino=55979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 252.993969][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4670'. [ 253.053710][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4672'. [ 253.216511][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.327130][ T29] audit: type=1326 audit(2000000638.736:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16984 comm="syz.3.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7fc00000 [ 253.638855][T16994] loop2: detected capacity change from 0 to 512 [ 253.691350][T16994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.707407][T16994] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.733543][T14476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.912022][T17005] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4681'. [ 253.921591][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4681'. [ 253.961771][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4685'. [ 253.976374][ T71] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.990213][ T71] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.006878][ T71] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.015541][ T71] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.153958][T17035] xt_hashlimit: max too large, truncated to 1048576 [ 254.256527][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.339621][T17052] SELinux: failed to load policy [ 254.566964][T17069] xt_hashlimit: max too large, truncated to 1048576 [ 254.873368][T17093] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 254.924194][T17093] SELinux: failed to load policy [ 255.112051][T17104] syzkaller1: entered promiscuous mode [ 255.117887][T17104] syzkaller1: entered allmulticast mode [ 255.306465][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 255.337916][T17110] xt_hashlimit: max too large, truncated to 1048576 [ 255.479781][T17118] loop2: detected capacity change from 0 to 2048 [ 255.535184][T17118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 255.887478][T17137] ip6tnl0: Caught tx_queue_len zero misconfig [ 255.924219][T11456] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 255.960232][T11456] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 255.973054][T11456] EXT4-fs (loop2): This should not happen!! Data will be lost [ 255.973054][T11456] [ 255.983526][T11456] EXT4-fs (loop2): Total free blocks count 0 [ 255.989753][T11456] EXT4-fs (loop2): Free/Dirty block details [ 255.995846][T11456] EXT4-fs (loop2): free_blocks=2415919104 [ 256.002557][T11456] EXT4-fs (loop2): dirty_blocks=4240 [ 256.008230][T11456] EXT4-fs (loop2): Block reservation details [ 256.014359][T11456] EXT4-fs (loop2): i_reserved_data_blocks=265 [ 256.164582][T17118] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 256.346500][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 256.813986][T17181] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 256.844693][T17176] loop9: detected capacity change from 0 to 2048 [ 256.880788][ T3311] Alternate GPT is invalid, using primary GPT. [ 256.887464][ T3311] loop9: p1 p2 p3 [ 256.891250][ T3311] loop9: partition table partially beyond EOD, truncated [ 256.918232][T17181] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 256.934888][T17176] Alternate GPT is invalid, using primary GPT. [ 256.941593][T17176] loop9: p1 p2 p3 [ 256.945859][T17176] loop9: partition table partially beyond EOD, truncated [ 256.995386][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 256.995480][ T29] audit: type=1326 audit(2000000642.396:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 257.043644][ T29] audit: type=1326 audit(2000000642.436:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 257.068838][ T29] audit: type=1326 audit(2000000642.436:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 257.092803][ T29] audit: type=1326 audit(2000000642.436:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 257.116968][ T29] audit: type=1326 audit(2000000642.436:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 257.141233][ T29] audit: type=1326 audit(2000000642.436:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 257.165895][ T29] audit: type=1326 audit(2000000642.436:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 257.190422][ T29] audit: type=1326 audit(2000000642.436:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 257.215076][ T29] audit: type=1326 audit(2000000642.436:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 257.239350][ T29] audit: type=1326 audit(2000000642.436:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 257.281344][T17181] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 257.350821][T17181] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 257.376499][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 257.445900][ T998] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 257.463207][ T998] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 257.491632][T11422] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 257.498312][T17214] __nla_validate_parse: 5 callbacks suppressed [ 257.498332][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4766'. [ 257.512151][T11422] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 257.615346][T17220] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4765'. [ 257.665412][T17228] loop2: detected capacity change from 0 to 764 [ 257.683452][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4774'. [ 257.695353][T17231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4774'. [ 257.726506][T17231] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4774'. [ 257.742381][T17228] Symlink component flag not implemented [ 257.769311][T17228] Symlink component flag not implemented (116) [ 257.904493][T17252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.951889][T17259] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4783'. [ 257.975118][T17252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.059736][T17252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.149679][T17252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.210247][ T71] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.225380][ T71] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.251566][ T71] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.274362][ T71] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.359757][T17297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4799'. [ 258.367202][T17295] loop2: detected capacity change from 0 to 2048 [ 258.377292][T17301] loop9: detected capacity change from 0 to 1024 [ 258.384704][T17301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.400318][T17301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.416526][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.438903][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4801'. [ 258.463885][ T3314] Alternate GPT is invalid, using primary GPT. [ 258.470482][ T3314] loop2: p1 p2 p3 [ 258.474320][ T3314] loop2: partition table partially beyond EOD, truncated [ 258.493809][T17295] Alternate GPT is invalid, using primary GPT. [ 258.500707][T17295] loop2: p1 p2 p3 [ 258.504665][T17295] loop2: partition table partially beyond EOD, truncated [ 258.748431][T17320] loop2: detected capacity change from 0 to 1024 [ 258.755232][T17320] EXT4-fs: Ignoring removed bh option [ 258.822453][T17320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.853758][T17320] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 258.869736][T17320] EXT4-fs (loop2): Remounting filesystem read-only [ 258.877348][T17320] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 258.910169][T14476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.960333][T17328] syzkaller1: entered promiscuous mode [ 258.966041][T17328] syzkaller1: entered allmulticast mode [ 259.015795][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4813'. [ 259.089318][T17340] loop8: detected capacity change from 0 to 764 [ 259.104688][T17340] Symlink component flag not implemented [ 259.110809][T17340] Symlink component flag not implemented (116) [ 259.367190][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.421391][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4824'. [ 259.456522][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.577581][T17364] loop8: detected capacity change from 0 to 128 [ 259.648463][T17369] bio_check_eod: 327 callbacks suppressed [ 259.648502][T17369] syz.8.4826: attempt to access beyond end of device [ 259.648502][T17369] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 259.680376][T17369] syz.8.4826: attempt to access beyond end of device [ 259.680376][T17369] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 259.720984][T17369] syz.8.4826: attempt to access beyond end of device [ 259.720984][T17369] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 259.760105][T17369] syz.8.4826: attempt to access beyond end of device [ 259.760105][T17369] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 259.829037][T17373] loop8: detected capacity change from 0 to 2048 [ 259.859868][T17373] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 260.175832][T11416] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 260.211338][T11416] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1970 with error 28 [ 260.224122][T11416] EXT4-fs (loop8): This should not happen!! Data will be lost [ 260.224122][T11416] [ 260.234558][T11416] EXT4-fs (loop8): Total free blocks count 0 [ 260.240886][T11416] EXT4-fs (loop8): Free/Dirty block details [ 260.242359][T17399] loop9: detected capacity change from 0 to 136 [ 260.247904][T11416] EXT4-fs (loop8): free_blocks=2415919104 [ 260.247931][T11416] EXT4-fs (loop8): dirty_blocks=1984 [ 260.247945][T11416] EXT4-fs (loop8): Block reservation details [ 260.247958][T11416] EXT4-fs (loop8): i_reserved_data_blocks=124 [ 260.287424][T17399] Attempt to read inode for relocated directory [ 260.308098][T11470] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.327907][T17403] netlink: 'syz.4.4839': attribute type 1 has an invalid length. [ 260.335870][T17403] netlink: 'syz.4.4839': attribute type 4 has an invalid length. [ 260.388266][T17403] netlink: 'syz.4.4839': attribute type 1 has an invalid length. [ 260.396652][T17403] netlink: 'syz.4.4839': attribute type 4 has an invalid length. [ 260.506484][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 260.556948][T11470] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.593932][T17373] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 260.623195][T11470] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.643559][T11470] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.181205][T17443] loop9: detected capacity change from 0 to 1024 [ 261.202746][T17443] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.4856: bad orphan inode 134217728 [ 261.233273][T17443] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.317037][T17391] syz.8.4829 (17391) used greatest stack depth: 5960 bytes left [ 261.437006][T17447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.451739][T17447] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.536769][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.632024][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.800039][T17459] GUP no longer grows the stack in syz.9.4861 (17459): 200000004000-20000000a000 (200000002000) [ 261.811008][T17459] CPU: 1 UID: 0 PID: 17459 Comm: syz.9.4861 Not tainted syzkaller #0 PREEMPT(voluntary) [ 261.811090][T17459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.811106][T17459] Call Trace: [ 261.811160][T17459] [ 261.811170][T17459] __dump_stack+0x1d/0x30 [ 261.811203][T17459] dump_stack_lvl+0x95/0xd0 [ 261.811230][T17459] dump_stack+0x15/0x1b [ 261.811251][T17459] __get_user_pages+0x195b/0x1ea0 [ 261.811282][T17459] ? __rcu_read_unlock+0x4e/0x70 [ 261.811363][T17459] get_user_pages_remote+0x1d5/0x6b0 [ 261.811394][T17459] __access_remote_vm+0x15c/0x580 [ 261.811425][T17459] access_remote_vm+0x32/0x40 [ 261.811495][T17459] proc_pid_cmdline_read+0x32b/0x6b0 [ 261.811519][T17459] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 261.811566][T17459] vfs_readv+0x432/0x6e0 [ 261.811593][T17459] __x64_sys_preadv+0xfd/0x1c0 [ 261.811619][T17459] x64_sys_call+0x2805/0x3000 [ 261.811694][T17459] do_syscall_64+0xc0/0x2a0 [ 261.811720][T17459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.811740][T17459] RIP: 0033:0x7f71f41cacb9 [ 261.811879][T17459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.811896][T17459] RSP: 002b:00007f71f2c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 261.811917][T17459] RAX: ffffffffffffffda RBX: 00007f71f4445fa0 RCX: 00007f71f41cacb9 [ 261.811931][T17459] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 261.811943][T17459] RBP: 00007f71f4238bf7 R08: 0000000000000000 R09: 0000000000000000 [ 261.811955][T17459] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 261.811982][T17459] R13: 00007f71f4446038 R14: 00007f71f4445fa0 R15: 00007ffedef4ad98 [ 261.811998][T17459] [ 262.088579][T17472] set_capacity_and_notify: 1 callbacks suppressed [ 262.088597][T17472] loop9: detected capacity change from 0 to 128 [ 262.105776][T17472] FAT-fs (loop9): bogus number of directory entries (390) [ 262.113157][T17472] FAT-fs (loop9): Can't find a valid FAT filesystem [ 262.194594][T17476] veth14: entered promiscuous mode [ 262.200529][T17476] veth14: entered allmulticast mode [ 262.275272][T17480] loop9: detected capacity change from 0 to 512 [ 262.316088][T17480] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 262.353202][T17480] EXT4-fs (loop9): 1 truncate cleaned up [ 262.372017][T17480] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.454190][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.576500][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 262.668000][T13358] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.723514][T17504] loop9: detected capacity change from 0 to 128 [ 262.794869][T17510] syz.9.4876: attempt to access beyond end of device [ 262.794869][T17510] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 262.823532][T17510] syz.9.4876: attempt to access beyond end of device [ 262.823532][T17510] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 262.838034][T17510] syz.9.4876: attempt to access beyond end of device [ 262.838034][T17510] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 262.852114][T17510] syz.9.4876: attempt to access beyond end of device [ 262.852114][T17510] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 262.866847][T17510] syz.9.4876: attempt to access beyond end of device [ 262.866847][T17510] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 262.880671][T17510] syz.9.4876: attempt to access beyond end of device [ 262.880671][T17510] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 262.922770][T17518] veth32: entered promiscuous mode [ 262.928243][T17518] veth32: entered allmulticast mode [ 263.076739][T17524] lo speed is unknown, defaulting to 1000 [ 263.360328][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 263.360347][ T29] audit: type=1400 audit(2000000648.766:1763): avc: denied { unmount } for pid=14476 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 263.443247][T17524] lo speed is unknown, defaulting to 1000 [ 263.626501][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 263.735881][T17551] loop2: detected capacity change from 0 to 128 [ 264.076349][T17559] __nla_validate_parse: 15 callbacks suppressed [ 264.076371][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4896'. [ 264.666496][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.722698][T17575] gtp0: entered promiscuous mode [ 264.734076][T17577] netlink: 'syz.4.4904': attribute type 8 has an invalid length. [ 264.741931][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4904'. [ 264.787623][T17577] bond0: entered promiscuous mode [ 264.793021][T17577] bond_slave_0: entered promiscuous mode [ 264.798853][T17577] bond_slave_1: entered promiscuous mode [ 264.827073][T17577] gretap0: entered promiscuous mode [ 264.843404][T17577] ip6gretap0: entered promiscuous mode [ 264.866598][T17577] hsr1: entered promiscuous mode [ 264.999208][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4909'. [ 265.257467][T17603] gtp0: entered promiscuous mode [ 265.268003][T17601] loop2: detected capacity change from 0 to 1024 [ 265.277519][T17601] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.318466][T17601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.367712][T17610] loop9: detected capacity change from 0 to 2048 [ 265.380442][T17613] netlink: 'syz.3.4919': attribute type 8 has an invalid length. [ 265.388297][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4919'. [ 265.424341][T17613] bond0: entered promiscuous mode [ 265.430227][T17613] bond_slave_0: entered promiscuous mode [ 265.436176][T17613] bond_slave_1: entered promiscuous mode [ 265.453762][T17613] bond0: left promiscuous mode [ 265.458846][T17613] bond_slave_0: left promiscuous mode [ 265.464390][T17613] bond_slave_1: left promiscuous mode [ 265.481063][T17610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 265.706573][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.723921][T17610] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 265.749342][ T29] audit: type=1400 audit(2000000651.146:1764): avc: denied { listen } for pid=17625 comm="syz.3.4922" lport=43143 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 265.779301][T17610] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 265.793547][T17610] EXT4-fs (loop9): This should not happen!! Data will be lost [ 265.793547][T17610] [ 265.803754][T17610] EXT4-fs (loop9): Total free blocks count 0 [ 265.809836][T17610] EXT4-fs (loop9): Free/Dirty block details [ 265.815962][T17610] EXT4-fs (loop9): free_blocks=2415919104 [ 265.821950][T17610] EXT4-fs (loop9): dirty_blocks=2816 [ 265.827688][T17610] EXT4-fs (loop9): Block reservation details [ 265.834053][T17610] EXT4-fs (loop9): i_reserved_data_blocks=176 [ 266.060053][ T29] audit: type=1400 audit(2000000651.466:1765): avc: denied { unmount } for pid=17640 comm="syz.8.4928" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 266.120922][T17646] gtp0: entered promiscuous mode [ 266.185169][T17652] lo speed is unknown, defaulting to 1000 [ 266.268160][ T29] audit: type=1400 audit(2000000651.676:1766): avc: denied { watch watch_reads } for pid=17654 comm="syz.4.4933" path="/" dev="ramfs" ino=58065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 266.350513][T11424] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 760 with error 28 [ 266.528485][T17652] lo speed is unknown, defaulting to 1000 [ 266.730610][T17662] netlink: 'syz.9.4934': attribute type 8 has an invalid length. [ 266.738959][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4934'. [ 266.746540][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.781536][T17662] bond0: entered promiscuous mode [ 266.786674][T17662] bond_slave_0: entered promiscuous mode [ 266.792467][T17662] bond_slave_1: entered promiscuous mode [ 266.808362][T14476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.821639][T17662] dummy0: entered promiscuous mode [ 266.827036][T17662] bridge0: entered promiscuous mode [ 266.850611][T17662] gretap0: entered promiscuous mode [ 266.856802][T17662] ip6gretap0: entered promiscuous mode [ 266.881472][ T29] audit: type=1400 audit(2000000652.286:1767): avc: denied { mounton } for pid=17669 comm="syz.2.4939" path=2F3138332FE91F7189591E9233614B dev="tmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 266.885698][T17662] debugfs: 'hsr1' already exists in 'hsr' [ 266.913039][T17662] Cannot create hsr debugfs directory [ 266.918608][T17662] hsr1: entered promiscuous mode [ 267.537559][T17691] syz.4.4946 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 267.552084][T17691] CPU: 1 UID: 0 PID: 17691 Comm: syz.4.4946 Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.552118][T17691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.552132][T17691] Call Trace: [ 267.552205][T17691] [ 267.552277][T17691] __dump_stack+0x1d/0x30 [ 267.552307][T17691] dump_stack_lvl+0x95/0xd0 [ 267.552334][T17691] dump_stack+0x15/0x1b [ 267.552353][T17691] dump_header+0x80/0x240 [ 267.552378][T17691] oom_kill_process+0x295/0x350 [ 267.552480][T17691] out_of_memory+0x97d/0xb80 [ 267.552503][T17691] try_charge_memcg+0x62e/0xa10 [ 267.552623][T17691] obj_cgroup_charge_pages+0xa6/0x150 [ 267.552658][T17691] __memcg_kmem_charge_page+0x9e/0x170 [ 267.552743][T17691] __alloc_frozen_pages_noprof+0x18a/0x350 [ 267.552780][T17691] alloc_pages_mpol+0xb3/0x260 [ 267.552812][T17691] alloc_pages_noprof+0x8f/0x130 [ 267.552839][T17691] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 267.552915][T17691] __kvmalloc_node_noprof+0x471/0x680 [ 267.552964][T17691] ? ip_set_alloc+0x24/0x30 [ 267.553006][T17691] ? ip_set_alloc+0x24/0x30 [ 267.553030][T17691] ip_set_alloc+0x24/0x30 [ 267.553139][T17691] hash_netiface_create+0x282/0x740 [ 267.553172][T17691] ? __pfx_hash_netiface_create+0x10/0x10 [ 267.553203][T17691] ip_set_create+0x3cf/0x970 [ 267.553318][T17691] ? __nla_parse+0x40/0x60 [ 267.553341][T17691] nfnetlink_rcv_msg+0x509/0x5d0 [ 267.553374][T17691] netlink_rcv_skb+0x123/0x220 [ 267.553413][T17691] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 267.553442][T17691] nfnetlink_rcv+0x167/0x1720 [ 267.553496][T17691] ? __list_del_entry_valid_or_report+0x65/0x130 [ 267.553541][T17691] ? __rmqueue_pcplist+0x9b6/0xb80 [ 267.553628][T17691] ? _raw_spin_lock_bh+0x56/0xb0 [ 267.553666][T17691] ? should_fail_ex+0x30/0x280 [ 267.553688][T17691] ? selinux_nlmsg_lookup+0x99/0x890 [ 267.553758][T17691] ? __rcu_read_unlock+0x33/0x70 [ 267.553779][T17691] ? __netlink_lookup+0x276/0x2b0 [ 267.553896][T17691] netlink_unicast+0x5c0/0x690 [ 267.553927][T17691] netlink_sendmsg+0x5c8/0x6f0 [ 267.553958][T17691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.553985][T17691] __sock_sendmsg+0x145/0x170 [ 267.554051][T17691] ____sys_sendmsg+0x31e/0x4a0 [ 267.554083][T17691] ___sys_sendmsg+0x195/0x1e0 [ 267.554120][T17691] __x64_sys_sendmsg+0xd4/0x160 [ 267.554230][T17691] x64_sys_call+0x17ba/0x3000 [ 267.554260][T17691] do_syscall_64+0xc0/0x2a0 [ 267.554291][T17691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.554391][T17691] RIP: 0033:0x7fcf86e1acb9 [ 267.554411][T17691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.554435][T17691] RSP: 002b:00007fcf85856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.554463][T17691] RAX: ffffffffffffffda RBX: 00007fcf87096090 RCX: 00007fcf86e1acb9 [ 267.554535][T17691] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 267.554548][T17691] RBP: 00007fcf86e88bf7 R08: 0000000000000000 R09: 0000000000000000 [ 267.554575][T17691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.554592][T17691] R13: 00007fcf87096128 R14: 00007fcf87096090 R15: 00007fff32b0dd18 [ 267.554616][T17691] [ 267.554631][T17691] memory: usage 307200kB, limit 307200kB, failcnt 1398 [ 267.777272][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 267.890510][T17691] memory+swap: usage 309044kB, limit 9007199254740988kB, failcnt 0 [ 267.898692][T17691] kmem: usage 225384kB, limit 9007199254740988kB, failcnt 0 [ 267.906325][T17691] Memory cgroup stats for /syz4: [ 267.906598][T17691] cache 83570688 [ 267.915359][T17691] rss 196608 [ 267.918795][T17691] shmem 16257024 [ 267.922519][T17691] mapped_file 11755520 [ 267.926714][T17691] dirty 0 [ 267.929789][T17691] writeback 0 [ 267.933201][T17691] workingset_refault_anon 872 [ 267.938003][T17691] workingset_refault_file 3765 [ 267.942786][T17691] swap 1888256 [ 267.946273][T17691] swapcached 12288 [ 267.950258][T17691] pgpgin 345089 [ 267.953817][T17691] pgpgout 324635 [ 267.957513][T17691] pgfault 340131 [ 267.961064][T17691] pgmajfault 264 [ 267.964718][T17691] inactive_anon 13000704 [ 267.969183][T17691] active_anon 3465216 [ 267.973224][T17691] inactive_file 0 [ 267.977218][T17691] active_file 0 [ 267.980690][T17691] unevictable 67313664 [ 267.985036][T17691] hierarchical_memory_limit 314572800 [ 267.990563][T17691] hierarchical_memsw_limit 9223372036854771712 [ 267.996818][T17691] total_cache 83570688 [ 268.001103][T17691] total_rss 196608 [ 268.005200][T17691] total_shmem 16257024 [ 268.009565][T17691] total_mapped_file 11755520 [ 268.014404][T17691] total_dirty 0 [ 268.018824][T17691] total_writeback 0 [ 268.022826][T17691] total_workingset_refault_anon 872 [ 268.028473][T17691] total_workingset_refault_file 3765 [ 268.034384][T17691] total_swap 1888256 [ 268.039289][T17691] total_swapcached 12288 [ 268.043916][T17691] total_pgpgin 345089 [ 268.048362][T17691] total_pgpgout 324635 [ 268.052492][T17691] total_pgfault 340131 [ 268.056989][T17691] total_pgmajfault 264 [ 268.061588][T17691] total_inactive_anon 13000704 [ 268.066908][T17691] total_active_anon 3465216 [ 268.071799][T17691] total_inactive_file 0 [ 268.076641][T17691] total_active_file 0 [ 268.081164][T17691] total_unevictable 67313664 [ 268.086631][T17691] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5,pid=3497,uid=0 [ 268.101935][T17691] Memory cgroup out of memory: Killed process 3497 (syz.4.5) total-vm:95976kB, anon-rss:1232kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 268.177191][ T3322] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 268.188374][ T3322] CPU: 0 UID: 0 PID: 3322 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 268.188447][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.188462][ T3322] Call Trace: [ 268.188471][ T3322] [ 268.188481][ T3322] __dump_stack+0x1d/0x30 [ 268.188590][ T3322] dump_stack_lvl+0x95/0xd0 [ 268.188617][ T3322] dump_stack+0x15/0x1b [ 268.188637][ T3322] dump_header+0x80/0x240 [ 268.188679][ T3322] oom_kill_process+0x295/0x350 [ 268.188711][ T3322] out_of_memory+0x97d/0xb80 [ 268.188745][ T3322] try_charge_memcg+0x62e/0xa10 [ 268.188783][ T3322] charge_memcg+0x51/0xc0 [ 268.188826][ T3322] __mem_cgroup_charge+0x28/0xb0 [ 268.188862][ T3322] filemap_add_folio+0x110/0x350 [ 268.188887][ T3322] __filemap_get_folio_mpol+0x326/0x680 [ 268.188915][ T3322] filemap_fault+0x473/0xbb0 [ 268.188985][ T3322] __do_fault+0xbc/0x200 [ 268.189022][ T3322] handle_mm_fault+0x11d7/0x3030 [ 268.189135][ T3322] ? vma_start_read+0x1c7/0x2c0 [ 268.189166][ T3322] do_user_addr_fault+0x62f/0x1050 [ 268.189201][ T3322] exc_page_fault+0x62/0xa0 [ 268.189242][ T3322] asm_exc_page_fault+0x26/0x30 [ 268.189262][ T3322] RIP: 0033:0x7fcf86ce8db4 [ 268.189285][ T3322] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 [ 268.189403][ T3322] RSP: 002b:00007fff32b0e080 EFLAGS: 00010202 [ 268.189422][ T3322] RAX: 0000001b34324000 RBX: 00000000000009bd RCX: 00000000000412f8 [ 268.189438][ T3322] RDX: 000000000836ac64 RSI: 00007fff32b0e110 RDI: 0000000000000001 [ 268.189453][ T3322] RBP: 00007fff32b0e0bc R08: 000000001f551002 R09: 7fffffffffffffff [ 268.189466][ T3322] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 268.189479][ T3322] R13: 00000000000927c0 R14: 00000000000414ba R15: 00007fff32b0e110 [ 268.189565][ T3322] [ 268.189574][ T3322] memory: usage 307200kB, limit 307200kB, failcnt 1589 [ 268.386160][ T3322] memory+swap: usage 309116kB, limit 9007199254740988kB, failcnt 0 [ 268.394162][ T3322] kmem: usage 225600kB, limit 9007199254740988kB, failcnt 0 [ 268.401652][ T3322] Memory cgroup stats for /syz4: [ 268.402309][ T3322] cache 83324928 [ 268.411027][ T3322] rss 196608 [ 268.414266][ T3322] shmem 16007168 [ 268.418181][ T3322] mapped_file 11575296 [ 268.422339][ T3322] dirty 0 [ 268.425285][ T3322] writeback 0 [ 268.428690][ T3322] workingset_refault_anon 878 [ 268.433416][ T3322] workingset_refault_file 3766 [ 268.438302][ T3322] swap 1961984 [ 268.442299][ T3322] swapcached 36864 [ 268.446105][ T3322] pgpgin 345096 [ 268.449770][ T3322] pgpgout 324696 [ 268.453366][ T3322] pgfault 340131 [ 268.456953][ T3322] pgmajfault 265 [ 268.460796][ T3322] inactive_anon 9101312 [ 268.465230][ T3322] active_anon 7139328 [ 268.469357][ T3322] inactive_file 0 [ 268.473085][ T3322] active_file 4096 [ 268.476936][ T3322] unevictable 67313664 [ 268.481049][ T3322] hierarchical_memory_limit 314572800 [ 268.486607][ T3322] hierarchical_memsw_limit 9223372036854771712 [ 268.492941][ T3322] total_cache 83324928 [ 268.497415][ T3322] total_rss 196608 [ 268.501238][ T3322] total_shmem 16007168 [ 268.505415][ T3322] total_mapped_file 11575296 [ 268.510270][ T3322] total_dirty 0 [ 268.514006][ T3322] total_writeback 0 [ 268.518202][ T3322] total_workingset_refault_anon 878 [ 268.523822][ T3322] total_workingset_refault_file 3766 [ 268.529484][ T3322] total_swap 1961984 [ 268.533481][ T3322] total_swapcached 36864 [ 268.537952][ T3322] total_pgpgin 345096 [ 268.542055][ T3322] total_pgpgout 324696 [ 268.546466][ T3322] total_pgfault 340131 [ 268.550564][ T3322] total_pgmajfault 265 [ 268.554728][ T3322] total_inactive_anon 9101312 [ 268.559471][ T3322] total_active_anon 7139328 [ 268.564078][ T3322] total_inactive_file 0 [ 268.568277][ T3322] total_active_file 4096 [ 268.572620][ T3322] total_unevictable 67313664 [ 268.577760][ T3322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4946,pid=17685,uid=0 [ 268.593018][ T3322] Memory cgroup out of memory: Killed process 17685 (syz.4.4946) total-vm:96312kB, anon-rss:1328kB, file-rss:22292kB, shmem-rss:11392kB, UID:0 pgtables:152kB oom_score_adj:0 [ 268.772255][T17720] loop9: detected capacity change from 0 to 8192 [ 268.816482][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.836772][ T3311] loop9: p1 p3 p4 [ 268.840864][ T3311] loop9: p1 size 477167616 extends beyond EOD, truncated [ 268.851876][ T3311] loop9: p3 start 4294901760 is beyond EOD, truncated [ 268.859037][ T3311] loop9: p4 size 32768 extends beyond EOD, truncated [ 268.880410][T17720] loop9: p1 p3 p4 [ 268.884648][T17720] loop9: p1 size 477167616 extends beyond EOD, truncated [ 268.894160][T17720] loop9: p3 start 4294901760 is beyond EOD, truncated [ 268.901079][T17720] loop9: p4 size 32768 extends beyond EOD, truncated [ 268.975429][ T29] audit: type=1326 audit(2000000654.376:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.3.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 268.999497][ T29] audit: type=1326 audit(2000000654.376:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.3.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 269.024025][ T29] audit: type=1326 audit(2000000654.376:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.3.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 269.037728][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 269.048580][ T29] audit: type=1326 audit(2000000654.376:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.3.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 269.048608][ T29] audit: type=1326 audit(2000000654.376:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.3.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 269.118244][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 269.120918][ T29] audit: type=1326 audit(2000000654.376:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.3.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 269.151982][ T29] audit: type=1326 audit(2000000654.376:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.3.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 269.176014][ T29] audit: type=1326 audit(2000000654.376:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.3.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 269.200747][ T29] audit: type=1326 audit(2000000654.516:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.3.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 269.224530][ T29] audit: type=1326 audit(2000000654.516:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.3.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 269.253514][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 269.253490][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 269.817800][T17778] program syz.2.4976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.857063][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.489547][T17784] syz.3.4973 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 270.504018][T17784] CPU: 1 UID: 0 PID: 17784 Comm: syz.3.4973 Not tainted syzkaller #0 PREEMPT(voluntary) [ 270.504110][T17784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 270.504161][T17784] Call Trace: [ 270.504177][T17784] [ 270.504185][T17784] __dump_stack+0x1d/0x30 [ 270.504265][T17784] dump_stack_lvl+0x95/0xd0 [ 270.504287][T17784] dump_stack+0x15/0x1b [ 270.504306][T17784] dump_header+0x80/0x240 [ 270.504368][T17784] oom_kill_process+0x295/0x350 [ 270.504390][T17784] out_of_memory+0x97d/0xb80 [ 270.504489][T17784] try_charge_memcg+0x62e/0xa10 [ 270.504532][T17784] obj_cgroup_charge_pages+0xa6/0x150 [ 270.504616][T17784] __memcg_kmem_charge_page+0x9e/0x170 [ 270.504655][T17784] __alloc_frozen_pages_noprof+0x18a/0x350 [ 270.504690][T17784] alloc_pages_mpol+0xb3/0x260 [ 270.504731][T17784] alloc_pages_noprof+0x8f/0x130 [ 270.504758][T17784] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 270.504858][T17784] __kvmalloc_node_noprof+0x471/0x680 [ 270.504891][T17784] ? ip_set_alloc+0x24/0x30 [ 270.504976][T17784] ? ip_set_alloc+0x24/0x30 [ 270.505006][T17784] ip_set_alloc+0x24/0x30 [ 270.505035][T17784] hash_netiface_create+0x282/0x740 [ 270.505109][T17784] ? __pfx_hash_netiface_create+0x10/0x10 [ 270.505140][T17784] ip_set_create+0x3cf/0x970 [ 270.505182][T17784] ? __nla_parse+0x40/0x60 [ 270.505264][T17784] nfnetlink_rcv_msg+0x509/0x5d0 [ 270.505303][T17784] netlink_rcv_skb+0x123/0x220 [ 270.505331][T17784] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 270.505368][T17784] nfnetlink_rcv+0x167/0x1720 [ 270.505398][T17784] ? __list_del_entry_valid_or_report+0x65/0x130 [ 270.505521][T17784] ? __rmqueue_pcplist+0x9b6/0xb80 [ 270.505552][T17784] ? _raw_spin_lock_bh+0x56/0xb0 [ 270.505586][T17784] ? should_fail_ex+0x30/0x280 [ 270.505667][T17784] ? selinux_nlmsg_lookup+0x99/0x890 [ 270.505697][T17784] ? __rcu_read_unlock+0x33/0x70 [ 270.505742][T17784] ? __netlink_lookup+0x276/0x2b0 [ 270.505776][T17784] netlink_unicast+0x5c0/0x690 [ 270.505858][T17784] netlink_sendmsg+0x5c8/0x6f0 [ 270.505889][T17784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.505946][T17784] __sock_sendmsg+0x145/0x170 [ 270.505978][T17784] ____sys_sendmsg+0x31e/0x4a0 [ 270.506006][T17784] ___sys_sendmsg+0x195/0x1e0 [ 270.506101][T17784] __x64_sys_sendmsg+0xd4/0x160 [ 270.506131][T17784] x64_sys_call+0x17ba/0x3000 [ 270.506189][T17784] do_syscall_64+0xc0/0x2a0 [ 270.506219][T17784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.506369][T17784] RIP: 0033:0x7fb74162acb9 [ 270.506391][T17784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.506418][T17784] RSP: 002b:00007fb740066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.506445][T17784] RAX: ffffffffffffffda RBX: 00007fb7418a6090 RCX: 00007fb74162acb9 [ 270.506546][T17784] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 270.506561][T17784] RBP: 00007fb741698bf7 R08: 0000000000000000 R09: 0000000000000000 [ 270.506575][T17784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.506589][T17784] R13: 00007fb7418a6128 R14: 00007fb7418a6090 R15: 00007ffd8e4c7708 [ 270.506634][T17784] [ 270.825687][T17784] memory: usage 307200kB, limit 307200kB, failcnt 1535 [ 270.832682][T17784] memory+swap: usage 307816kB, limit 9007199254740988kB, failcnt 0 [ 270.840777][T17784] kmem: usage 293960kB, limit 9007199254740988kB, failcnt 0 [ 270.848261][T17784] Memory cgroup stats for /syz3: [ 270.863098][T17784] cache 13078528 [ 270.871661][T17784] rss 286720 [ 270.874987][T17784] shmem 13078528 [ 270.878684][T17784] mapped_file 9068544 [ 270.882896][T17784] dirty 0 [ 270.886092][T17784] writeback 0 [ 270.889547][T17784] workingset_refault_anon 445 [ 270.894788][T17784] workingset_refault_file 5147 [ 270.896489][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.899871][T17784] swap 630784 [ 270.910061][T17784] swapcached 192512 [ 270.913873][T17784] pgpgin 351891 [ 270.917489][T17784] pgpgout 348581 [ 270.921213][T17784] pgfault 351089 [ 270.924945][T17784] pgmajfault 247 [ 270.928533][T17784] inactive_anon 946176 [ 270.932604][T17784] active_anon 12611584 [ 270.936720][T17784] inactive_file 0 [ 270.940569][T17784] active_file 0 [ 270.944206][T17784] unevictable 0 [ 270.947751][T17784] hierarchical_memory_limit 314572800 [ 270.953128][T17784] hierarchical_memsw_limit 9223372036854771712 [ 270.959568][T17784] total_cache 13078528 [ 270.963704][T17784] total_rss 286720 [ 270.968056][T17784] total_shmem 13078528 [ 270.972502][T17784] total_mapped_file 9068544 [ 270.977279][T17784] total_dirty 0 [ 270.980843][T17784] total_writeback 0 [ 270.984863][T17784] total_workingset_refault_anon 445 [ 270.990121][T17784] total_workingset_refault_file 5147 [ 270.995422][T17784] total_swap 630784 [ 270.999366][T17784] total_swapcached 192512 [ 271.004275][T17784] total_pgpgin 351891 [ 271.008473][T17784] total_pgpgout 348581 [ 271.012920][T17784] total_pgfault 351089 [ 271.017094][T17784] total_pgmajfault 247 [ 271.021530][T17784] total_inactive_anon 946176 [ 271.027376][T17784] total_active_anon 12611584 [ 271.032085][T17784] total_inactive_file 0 [ 271.036719][T17784] total_active_file 0 [ 271.042054][T17784] total_unevictable 0 [ 271.047375][T17784] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4973,pid=17766,uid=0 [ 271.064354][T17784] Memory cgroup out of memory: Killed process 17766 (syz.3.4973) total-vm:96312kB, anon-rss:1332kB, file-rss:22340kB, shmem-rss:8856kB, UID:0 pgtables:140kB oom_score_adj:0 [ 271.347287][T17826] uprobe: syz.4.5003:17826 failed to unregister, leaking uprobe [ 271.766570][T17856] netlink: 'syz.2.5008': attribute type 29 has an invalid length. [ 271.777690][T17856] netlink: 'syz.2.5008': attribute type 29 has an invalid length. [ 271.787821][T17856] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5008'. [ 271.853536][T17860] netlink: 'syz.8.5011': attribute type 83 has an invalid length. [ 271.892439][T17864] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5013'. [ 271.931499][T17867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5024'. [ 271.936475][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.024048][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a06be00: rx timeout, send abort [ 272.167569][T17882] uprobe: syz.2.5019:17882 failed to unregister, leaking uprobe [ 272.330571][T17890] netlink: 'syz.9.5021': attribute type 29 has an invalid length. [ 272.350462][T17890] netlink: 'syz.9.5021': attribute type 29 has an invalid length. [ 272.359463][T17890] netlink: 500 bytes leftover after parsing attributes in process `syz.9.5021'. [ 272.393740][T17896] netlink: 'syz.2.5025': attribute type 83 has an invalid length. [ 272.429346][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5028'. [ 272.474718][T17906] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5030'. [ 272.532326][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a06be00: abort rx timeout. Force session deactivation [ 272.965707][T17930] netlink: 'syz.9.5039': attribute type 83 has an invalid length. [ 272.976516][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 273.212561][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5054'. [ 274.016500][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.193059][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5074'. [ 274.207649][T18008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.224943][T18008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.233907][T18008] bond2: (slave bond0): Enslaving as an active interface with an up link [ 274.251033][T18008] bond2 (unregistering): (slave bond0): Releasing backup interface [ 274.261774][T18008] bond2 (unregistering): Released all slaves [ 274.321198][T18011] tipc: New replicast peer: 255.255.255.255 [ 274.328028][T18011] tipc: Enabled bearer , priority 10 [ 274.433267][T18026] netlink: 'syz.4.5082': attribute type 13 has an invalid length. [ 274.463264][T18026] gretap0: refused to change device tx_queue_len [ 274.472884][T18026] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 274.508301][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5085'. [ 274.650911][T18047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 274.773773][T18058] netlink: 'syz.9.5095': attribute type 1 has an invalid length. [ 275.056500][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 275.162576][T18094] netlink: 'syz.2.5109': attribute type 1 has an invalid length. [ 275.179935][T18094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.196211][T18094] bond2: (slave dummy0): making interface the new active one [ 275.205497][T18094] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 275.314778][T18111] loop7: detected capacity change from 0 to 16384 [ 275.862451][T18171] lo speed is unknown, defaulting to 1000 [ 276.096531][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 276.272336][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 276.272380][ T29] audit: type=1326 audit(2000000661.676:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.2.5150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7696a6acb9 code=0x0 [ 276.634709][ T29] audit: type=1400 audit(2000000662.036:1812): avc: denied { unmount } for pid=18205 comm="syz.8.5156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 276.712710][ T29] audit: type=1326 audit(2000000662.116:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18216 comm="syz.9.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f41cacb9 code=0x7ffc0000 [ 276.737380][ T29] audit: type=1326 audit(2000000662.116:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18216 comm="syz.9.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f71f41cacb9 code=0x7ffc0000 [ 276.761605][ T29] audit: type=1326 audit(2000000662.116:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18216 comm="syz.9.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f41cacb9 code=0x7ffc0000 [ 276.786295][ T29] audit: type=1326 audit(2000000662.116:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18216 comm="syz.9.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71f41cacb9 code=0x7ffc0000 [ 276.810533][ T29] audit: type=1326 audit(2000000662.116:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18216 comm="syz.9.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f41cacb9 code=0x7ffc0000 [ 276.834770][ T29] audit: type=1326 audit(2000000662.116:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18216 comm="syz.9.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f71f41cacb9 code=0x7ffc0000 [ 276.859677][ T29] audit: type=1326 audit(2000000662.116:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18216 comm="syz.9.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f41cacb9 code=0x7ffc0000 [ 276.883638][ T29] audit: type=1326 audit(2000000662.116:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18216 comm="syz.9.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f71f41cacb9 code=0x7ffc0000 [ 276.999091][T18229] geneve5: entered promiscuous mode [ 277.004498][T18229] geneve5: entered allmulticast mode [ 277.024551][T18233] __nla_validate_parse: 7 callbacks suppressed [ 277.024570][T18233] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5168'. [ 277.033925][T18235] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5169'. [ 277.040784][T18233] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5168'. [ 277.136501][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 277.252882][T18264] validate_nla: 1 callbacks suppressed [ 277.252899][T18264] netlink: 'syz.8.5181': attribute type 4 has an invalid length. [ 277.295551][T18264] netlink: 'syz.8.5181': attribute type 4 has an invalid length. [ 277.316819][T18267] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5184'. [ 277.401808][T18274] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 277.456322][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5190'. [ 277.479387][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5190'. [ 277.527687][T18287] 9p: Unknown access argument 18446744073709551615: -34 [ 277.540579][T18289] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.548351][T18289] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.176558][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.186109][T18308] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 278.331499][T18308] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 278.419409][T18308] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 278.468901][T18308] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 278.584772][T11465] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 278.602316][T11465] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 278.617811][T11465] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 278.684630][ T2049] Bluetooth: hci0: Frame reassembly failed (-84) [ 278.699599][T11465] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 278.783979][T18336] tipc: Enabling of bearer rejected, failed to enable media [ 278.805234][T18340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5214'. [ 279.073299][T18380] lo speed is unknown, defaulting to 1000 [ 279.073950][T18382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5240'. [ 279.216534][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 279.668683][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5235'. [ 279.677672][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5235'. [ 279.788309][T18406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.867372][T18412] loop2: detected capacity change from 0 to 4096 [ 279.885692][T18412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.107035][T14476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.256479][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 280.687071][T18454] loop2: detected capacity change from 0 to 512 [ 280.700043][T18454] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 280.708678][T18454] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 280.717529][T18454] EXT4-fs (loop2): orphan cleanup on readonly fs [ 280.724144][T18454] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 280.739418][T18454] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 280.746580][T18330] Bluetooth: hci0: command 0x1003 tx timeout [ 280.746860][ T4523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 280.761181][T18454] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5258: bg 0: block 40: padding at end of block bitmap is not set [ 280.817226][T18454] EXT4-fs (loop2): Remounting filesystem read-only [ 280.823882][T18454] EXT4-fs (loop2): 1 truncate cleaned up [ 280.882996][T18465] lo speed is unknown, defaulting to 1000 [ 280.887169][T18454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 280.937388][T14476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.031431][T18476] loop9: detected capacity change from 0 to 512 [ 281.056946][T18476] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.071628][T18476] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 281.087834][T18476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 281.096230][T18476] System zones: 1-12 [ 281.101445][T18476] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.5268: corrupted in-inode xattr: e_value size too large [ 281.116866][T18476] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5268: couldn't read orphan inode 15 (err -117) [ 281.129965][T18476] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.160741][T18476] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.5268: Unrecognised inode hash code 4 [ 281.172412][T18476] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5268: Corrupt directory, running e2fsck is recommended [ 281.196647][T18476] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.5268: Unrecognised inode hash code 4 [ 281.208384][T18476] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5268: Corrupt directory, running e2fsck is recommended [ 281.277894][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.296476][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 281.620814][T18540] loop9: detected capacity change from 0 to 512 [ 281.637133][T18540] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.745779][T18549] team0: Device gtp1 is of different type [ 281.874835][T18559] loop9: detected capacity change from 0 to 8192 [ 281.917326][T18559] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.987227][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 281.987246][ T29] audit: type=1400 audit(2000000667.396:1829): avc: denied { remount } for pid=18548 comm="syz.9.5299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 282.015904][T18549] netlink: 'syz.9.5299': attribute type 1 has an invalid length. [ 282.336501][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 282.851834][ T29] audit: type=1326 audit(2000000668.256:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18618 comm="syz.8.5327" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f898d26acb9 code=0x0 [ 283.042126][T18626] __nla_validate_parse: 3 callbacks suppressed [ 283.042144][T18626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5331'. [ 283.092964][T18629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5331'. [ 283.178059][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5333'. [ 283.208726][T18633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5333'. [ 283.263743][T18637] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5335'. [ 283.323660][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5337'. [ 283.358703][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5337'. [ 283.376519][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 284.043943][T18613] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5324'. [ 284.053467][T18613] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5324'. [ 284.426481][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 284.617020][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5362'. [ 284.730134][T18715] team1: entered promiscuous mode [ 284.735316][T18715] team1: entered allmulticast mode [ 284.741952][T18715] 8021q: adding VLAN 0 to HW filter on device team1 [ 284.774628][T18723] tipc: New replicast peer: 255.255.255.255 [ 284.780753][T18723] tipc: Enabled bearer , priority 10 [ 285.053705][T18755] netlink: 'syz.2.5385': attribute type 13 has an invalid length. [ 285.068928][T18755] gretap0: refused to change device tx_queue_len [ 285.076217][T18755] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 285.225754][T18777] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 285.308609][T11416] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.317565][T11416] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.332813][T11416] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.348524][T11416] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.367540][ T29] audit: type=1326 audit(2000000670.776:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18795 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 285.370742][T18794] lo speed is unknown, defaulting to 1000 [ 285.415919][ T29] audit: type=1326 audit(2000000670.806:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18795 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 285.440067][ T29] audit: type=1326 audit(2000000670.806:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18795 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 285.463997][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.471218][ T29] audit: type=1326 audit(2000000670.806:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18795 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 285.495439][ T29] audit: type=1326 audit(2000000670.806:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18795 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 285.519863][ T29] audit: type=1326 audit(2000000670.806:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18795 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 285.543680][ T29] audit: type=1326 audit(2000000670.806:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18795 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 285.567462][ T29] audit: type=1326 audit(2000000670.806:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18795 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74162acb9 code=0x7ffc0000 [ 285.597833][T18802] netlink: 'syz.3.5407': attribute type 1 has an invalid length. [ 285.656280][T18802] bond6: entered promiscuous mode [ 285.661967][T18802] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.704466][T18811] loop2: detected capacity change from 0 to 128 [ 285.715105][T18811] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.722975][T18802] bond6: (slave bridge17): making interface the new active one [ 285.735930][T18802] bridge17: entered promiscuous mode [ 285.741624][T18811] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.770467][T18802] bridge17: left promiscuous mode [ 285.805416][T14476] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.924800][T18821] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 286.138727][T18834] openvswitch: netlink: Missing key (keys=40, expected=100) [ 286.288971][T18815] syz.8.5411 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 286.303837][T18815] CPU: 0 UID: 0 PID: 18815 Comm: syz.8.5411 Not tainted syzkaller #0 PREEMPT(voluntary) [ 286.303870][T18815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.303894][T18815] Call Trace: [ 286.303903][T18815] [ 286.303912][T18815] __dump_stack+0x1d/0x30 [ 286.303956][T18815] dump_stack_lvl+0x95/0xd0 [ 286.303982][T18815] dump_stack+0x15/0x1b [ 286.304003][T18815] dump_header+0x80/0x240 [ 286.304028][T18815] oom_kill_process+0x295/0x350 [ 286.304066][T18815] out_of_memory+0x97d/0xb80 [ 286.304092][T18815] try_charge_memcg+0x62e/0xa10 [ 286.304153][T18815] obj_cgroup_charge_pages+0xa6/0x150 [ 286.304185][T18815] __memcg_kmem_charge_page+0x9e/0x170 [ 286.304218][T18815] __alloc_frozen_pages_noprof+0x18a/0x350 [ 286.304305][T18815] alloc_pages_mpol+0xb3/0x260 [ 286.304337][T18815] alloc_pages_noprof+0x8f/0x130 [ 286.304368][T18815] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 286.304485][T18815] __kvmalloc_node_noprof+0x471/0x680 [ 286.304513][T18815] ? ip_set_alloc+0x24/0x30 [ 286.304541][T18815] ? ip_set_alloc+0x24/0x30 [ 286.304602][T18815] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 286.304629][T18815] ip_set_alloc+0x24/0x30 [ 286.304653][T18815] hash_netiface_create+0x282/0x740 [ 286.304742][T18815] ? __pfx_hash_netiface_create+0x10/0x10 [ 286.304822][T18815] ip_set_create+0x3cf/0x970 [ 286.304862][T18815] ? __nla_parse+0x40/0x60 [ 286.304925][T18815] nfnetlink_rcv_msg+0x509/0x5d0 [ 286.304966][T18815] netlink_rcv_skb+0x123/0x220 [ 286.305070][T18815] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 286.305119][T18815] nfnetlink_rcv+0x167/0x1720 [ 286.305152][T18815] ? __kfree_skb+0x109/0x150 [ 286.305205][T18815] ? nlmon_xmit+0x4f/0x60 [ 286.305226][T18815] ? consume_skb+0x49/0x140 [ 286.305250][T18815] ? nlmon_xmit+0x4f/0x60 [ 286.305272][T18815] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 286.305302][T18815] ? __dev_queue_xmit+0x139a/0x1f20 [ 286.305378][T18815] ? __dev_queue_xmit+0x148/0x1f20 [ 286.305475][T18815] ? mas_wr_walk_descend+0x36e/0x470 [ 286.305553][T18815] ? ref_tracker_free+0x37d/0x3e0 [ 286.305582][T18815] ? __netlink_deliver_tap+0x4dc/0x500 [ 286.305682][T18815] netlink_unicast+0x5c0/0x690 [ 286.305714][T18815] netlink_sendmsg+0x5c8/0x6f0 [ 286.305755][T18815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.305783][T18815] __sock_sendmsg+0x145/0x170 [ 286.305816][T18815] ____sys_sendmsg+0x31e/0x4a0 [ 286.305862][T18815] ___sys_sendmsg+0x195/0x1e0 [ 286.305958][T18815] __x64_sys_sendmsg+0xd4/0x160 [ 286.305990][T18815] x64_sys_call+0x17ba/0x3000 [ 286.306018][T18815] do_syscall_64+0xc0/0x2a0 [ 286.306049][T18815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.306087][T18815] RIP: 0033:0x7f898d26acb9 [ 286.306106][T18815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.306128][T18815] RSP: 002b:00007f898bcc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.306191][T18815] RAX: ffffffffffffffda RBX: 00007f898d4e5fa0 RCX: 00007f898d26acb9 [ 286.306207][T18815] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 286.306223][T18815] RBP: 00007f898d2d8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 286.306238][T18815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.306252][T18815] R13: 00007f898d4e6038 R14: 00007f898d4e5fa0 R15: 00007ffeb567c2a8 [ 286.306274][T18815] [ 286.306357][T18815] memory: usage 307200kB, limit 307200kB, failcnt 432 [ 286.506640][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 286.507926][T18815] memory+swap: usage 374984kB, limit 9007199254740988kB, failcnt 0 [ 286.671324][T18815] kmem: usage 295520kB, limit 9007199254740988kB, failcnt 0 [ 286.678823][T18815] Memory cgroup stats for /syz8: [ 286.679360][T18815] cache 11759616 [ 286.688122][T18815] rss 200704 [ 286.691334][T18815] shmem 11755520 [ 286.695020][T18815] mapped_file 11759616 [ 286.699271][T18815] dirty 0 [ 286.702309][T18815] writeback 0 [ 286.705693][T18815] workingset_refault_anon 133 [ 286.711198][T18815] workingset_refault_file 576 [ 286.716060][T18815] swap 69410816 [ 286.719687][T18815] swapcached 0 [ 286.723665][T18815] pgpgin 173223 [ 286.727349][T18815] pgpgout 170303 [ 286.730926][T18815] pgfault 158993 [ 286.734638][T18815] pgmajfault 125 [ 286.738354][T18815] inactive_anon 11575296 [ 286.742690][T18815] active_anon 380928 [ 286.746646][T18815] inactive_file 4096 [ 286.750582][T18815] active_file 0 [ 286.754196][T18815] unevictable 0 [ 286.757783][T18815] hierarchical_memory_limit 314572800 [ 286.763286][T18815] hierarchical_memsw_limit 9223372036854771712 [ 286.769571][T18815] total_cache 11759616 [ 286.773753][T18815] total_rss 200704 [ 286.777702][T18815] total_shmem 11755520 [ 286.781970][T18815] total_mapped_file 11759616 [ 286.786698][T18815] total_dirty 0 [ 286.790466][T18815] total_writeback 0 [ 286.794370][T18815] total_workingset_refault_anon 133 [ 286.799622][T18815] total_workingset_refault_file 576 [ 286.805613][T18815] total_swap 69410816 [ 286.809637][T18815] total_swapcached 0 [ 286.813720][T18815] total_pgpgin 173223 [ 286.817836][T18815] total_pgpgout 170303 [ 286.822009][T18815] total_pgfault 158993 [ 286.827551][T18815] total_pgmajfault 125 [ 286.832344][T18815] total_inactive_anon 11575296 [ 286.837546][T18815] total_active_anon 380928 [ 286.842731][T18815] total_inactive_file 4096 [ 286.847962][T18815] total_active_file 0 [ 286.852046][T18815] total_unevictable 0 [ 286.856128][T18815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.5411,pid=18814,uid=0 [ 286.872329][T18815] Memory cgroup out of memory: Killed process 18814 (syz.8.5411) total-vm:94264kB, anon-rss:1332kB, file-rss:22284kB, shmem-rss:11264kB, UID:0 pgtables:144kB oom_score_adj:0 [ 287.050217][T18846] lo speed is unknown, defaulting to 1000 [ 287.242014][T18857] pimreg: entered allmulticast mode [ 287.264958][T18857] pimreg: left allmulticast mode [ 287.361426][T18862] loop2: detected capacity change from 0 to 512 [ 287.370554][T18862] EXT4-fs: Ignoring removed i_version option [ 287.376857][T18862] EXT4-fs: Ignoring removed nobh option [ 287.399852][T18862] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 287.438990][T18862] EXT4-fs (loop2): 1 truncate cleaned up [ 287.445238][T18862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.536528][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.548324][T14476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.717107][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 287.717125][ T29] audit: type=1400 audit(2000000673.116:1848): avc: denied { read } for pid=18888 comm="syz.2.5438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.727409][T18889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.821542][T18894] ip6gre1: entered promiscuous mode [ 287.826924][T18894] ip6gre1: entered allmulticast mode [ 287.945140][ T29] audit: type=1400 audit(2000000673.346:1849): avc: denied { ioctl } for pid=18905 comm="syz.2.5445" path="socket:[67583]" dev="sockfs" ino=67583 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 287.978738][T18906] loop2: detected capacity change from 0 to 512 [ 288.042828][T18904] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 288.062135][ T29] audit: type=1400 audit(2000000673.466:1850): avc: denied { getopt } for pid=18911 comm="syz.2.5450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.158940][T18925] ================================================================== [ 288.167565][T18925] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 288.174967][T18925] [ 288.177321][T18925] write to 0xffff888113074a90 of 8 bytes by task 18924 on cpu 0: [ 288.185227][T18925] __dentry_kill+0x142/0x4b0 [ 288.190074][T18925] finish_dput+0x2b/0x200 [ 288.194698][T18925] dput+0x52/0x60 [ 288.198354][T18925] step_into_slowpath+0x38c/0x4c0 [ 288.204300][T18925] path_lookupat+0x330/0x500 [ 288.209379][T18925] filename_lookup+0x190/0x390 [ 288.214919][T18925] filename_getxattr+0x54/0x1a0 [ 288.220162][T18925] io_getxattr+0x50/0xe0 [ 288.224988][T18925] __io_issue_sqe+0xfd/0x2d0 [ 288.230381][T18925] io_issue_sqe+0x56/0xa70 [ 288.236748][T18925] io_wq_submit_work+0x3f7/0x5f0 [ 288.242589][T18925] io_worker_handle_work+0x44d/0x9b0 [ 288.248273][T18925] io_wq_worker+0x22d/0x860 [ 288.253265][T18925] ret_from_fork+0x148/0x280 [ 288.258547][T18925] ret_from_fork_asm+0x1a/0x30 [ 288.263427][T18925] [ 288.265848][T18925] read to 0xffff888113074a90 of 8 bytes by task 18925 on cpu 1: [ 288.273748][T18925] fast_dput+0x5f/0x2c0 [ 288.278191][T18925] dput+0x24/0x60 [ 288.282004][T18925] step_into_slowpath+0x38c/0x4c0 [ 288.287125][T18925] path_lookupat+0x330/0x500 [ 288.292693][T18925] filename_lookup+0x190/0x390 [ 288.297944][T18925] filename_getxattr+0x54/0x1a0 [ 288.303697][T18925] io_getxattr+0x50/0xe0 [ 288.308319][T18925] __io_issue_sqe+0xfd/0x2d0 [ 288.313023][T18925] io_issue_sqe+0x56/0xa70 [ 288.317728][T18925] io_wq_submit_work+0x3f7/0x5f0 [ 288.322767][T18925] io_worker_handle_work+0x44d/0x9b0 [ 288.328177][T18925] io_wq_worker+0x22d/0x860 [ 288.332901][T18925] ret_from_fork+0x148/0x280 [ 288.337690][T18925] ret_from_fork_asm+0x1a/0x30 [ 288.342827][T18925] [ 288.345237][T18925] value changed: 0xffff8882374acbb0 -> 0x0000000000000000 [ 288.352342][T18925] [ 288.354838][T18925] Reported by Kernel Concurrency Sanitizer on: [ 288.361058][T18925] CPU: 1 UID: 0 PID: 18925 Comm: iou-wrk-18921 Not tainted syzkaller #0 PREEMPT(voluntary) [ 288.371644][T18925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.382145][T18925] ================================================================== [ 288.586463][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.616480][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.656650][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.696491][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 292.736491][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.776517][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.816672][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.856485][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.896533][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.936501][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available